Where are they saved?
How secure is this data?
At the time of this writing, Triple DES is practically unbreakable through brute force methods.
So can malware access this?
I am not a malware developer, but I don’t see any reason it could not.
What if my computer is stolen?
The simple answer is this data is as secure as your Windows account password.
If you use no password, you have no protection.
After the reset, I saved a new Gmail address password (blah@) and ran IE PassView.
This is definitely a good thing.